Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Mô tả

Tham khảo

• hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-1603

Lỗ hổng khác của endpoint manager

• CVE-2026-8111CAO 8.8SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote…
• CVE-2026-8110CAO 7.8Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to es…
• CVE-2026-8109TRUNG BÌNH 6.5An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to …
• CVE-2026-1602TRUNG BÌNH 6.5SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data…
• CVE-2025-13662CAO 7.8Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1…